2024-04-16_d62395f62c59740f16de2c60d4d53be3_mafia | Triage

Sharing

General

Target

2024-04-16_d62395f62c59740f16de2c60d4d53be3_mafia
Size

448KB
MD5

d62395f62c59740f16de2c60d4d53be3
SHA1

faf420707eb8580ddc4e6a6bf4622fe1125f198d
SHA256

75d9a2ff8999a542d182dc31ce7d74b9f45739e47acb7ee6b27ef5ea8634c748
SHA512

243c12b75b39b47153b7fc078cac34d7ef3acc2897d70e2b0f1615b4982e95b6336ebf333a688fdd64b85a2227bac45eff784a7e5ce1d0d6ab612ff78082a35c
SSDEEP

6144:3FrJxvldL4c5ONK1tgRbd1s79+i5+Ls4uzLN0EZqtEiK2diPLhV8/FaSNADmX0q:lb4bBxdi79L4s4umEZXiKjsyDmXJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-16_d62395f62c59740f16de2c60d4d53be3_mafia

Files

2024-04-16_d62395f62c59740f16de2c60d4d53be3_mafia
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 260KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE